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Amendnients to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) An arrangement for proteetiori of end user personal 
profile data in a communication system ihcluding a number of end user stations and a 
number of serviGe/information/Gontent providers, or holding means holding end user 
personal profile data, the arrangement comprising: 

an intermediary An Jntermediate proxy server supporting^ cphimunicatibh 
protocol for end user station communication; 

a porGona l profile data protection serve r, for protecting end user personal profile 
data, supporting a second communication protocol :fpr Gommunication with the 
intermediary proxy server and a third communication protocol for communication with 
one of said: service/inforrhatibn/conterit providers, said pbrGOhal profile data = protection 
server further comprises 

an application programming interface (APf) allowing 
se n/ice/information/cpntent provid er q ueries/ihteractio ns , and 

storing means for storing of end user specific data and end user personal 
profile data, the poroona l profile data protection server having a prdtectidn certificate;. 

means for providing published cerfificates to theJntermecl proxy server; and 

wh erein- t he intermediary proxy server comprising further compris e s 

means for verifying the authehticitv gehulhity of the protection certificate 
requested over said second communieatigri protocol from-the p e rsona l profil e protection 
server against a published certificate and, 

responsive to receipt of a verified genuine protection certificate of the 
personal profil e data protection server, the service/information/content provider s orvice/ 
i nf or m at i o n content s o rvor requesting can re q uest, via the API, the end user personal 
profile data , which af^ d th e ih -4hat-rpe(^Rai-pfefile-^^ delivered according to end 
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user preferences or delivered i n such a rhann e r that there is having no association 
between the actual end user and the penson^l profile data ipf^thfe end; us;er. 

2 . (Previously Preserited) The arfangem^nt^^ to claims 1 ; Wherein the 
first communications protocol is a secure protocolv 

3. -4,, (Canceled) 

5. (Gurrehtly Amended) the arrangement according to claim^ 1 , wherein the 
second commuriicatioh protocol is a secure pfpt 

6. (Canceled) 

7. (Previously Presented) The arrangement, according to/x^laim i , wherein the^ 
intermediary pro)?y server i$ a H^FTP prpxyy 

8. (Previously Presented) The arrangement according to claim 1 . wherein the 
intermediary proxy server comprises hplding- means for holdin^^^ certificates: 

9. (Previously Presented) The arrangement according to claim 1 , wherein the 
intermediary prpxy server is in cpiiimuhi^^^ with externail holding means; hplding 
published certificates. 

10. (Canceled) 

1 1 . (Previously Presented) The arrangement aceordihg to claim 1 , wherein the 
intermediary proxy server is located withih;.ari intranet prat the ^:p^ premises. 
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12. (Previously Presented) The arfangernent according to claim 1, wherein the 
intermediary proxy server comprises a functionality for establishing a security 
communication agreement with the protection sen/er. 

1 3. (Previously Presented) The arrang|ement according to claim 12. wherein 
the user preferences are stored in the end user station. 

14. (Currently Amended) The arrangement according to claim 12, wherein the 
user preferences relating to privacy level are stored in the intermediary proxy server. 

15. (Previously Presented) The arrangement according to claim 13. wherein 
the user preferences relating to privacy level are stored iri separate fast access storing 
means after completion of the security cpmmuniGation agreement. 

16. (Currently Amended) The arrangement accord ihg to claim 15. wherein the 
protection server comprises an API allowing service provider control of site and page 
policies, and i n that if the end user privacy level is increased, data below the privacy 
level is deleted. 

17. (Currently Amended) The arrangement according to claim 16. wherein the 
protection proxy server provides certificates, and preferably signatures upon request by 
said intermediary proxy server. 

18. -19. (Canceled) 

20. (Previously Presented) The arrangement according to claim 1 , wherein the 
protection server storing means comprises at least three tables containing information 
about end user specific data, personal profile data information and statistical data 
respectively. 
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21 . (Previously Presented) The larrangenrient at?eo..rc|ing to plaim 20, wherein 
the end user specific data and end user personal profile data is provided to; the service 
provider in suqh a manner that the end user eahhot be tfaeed by the Service provider. 

22. (Currently iA^mended) The: arrangement according: to claim;'21 , wherein the 
protection pfe^^server corifiprises rheahs for pseudonyrnjzing.sfatist^^^ and 
personal profile information by using a unique pseudo^^ each :URL of the. siervjce 
provider that is requested. 

23. (Currently Amended) A method for protectipn -of end user personal profile 
data in a communicatidn system with a number of , end user stations and a number of 
servicet/information/cQhterit prpyiders:;the method epitip^^ steps of: 

registering a. certificate for :an end us e r personal prof i l e a protection server 
for protectina end user peirsonali prdfile data with a Irusfed third party,. 

providing a request for the certificate from ah interhfiediary proxy server in 
communication with an end user station using^ a first communication protoGoj, to the 
protection sefyer dyer a second communication protocol, 

providing a^ response from the: prftt^ction server to the intermediary server, 

verifying, in the intermediary; proxy ^sewer that the. certificate is genuine, 
thereby beipiiging to the respective pfdtectipn server and: is fegistei'ed with the trustee! 
third party, 

after tonfirmation that- the protectibn server[[/]] certificate is genuine, 
allpvying the service pfpyider having acq ui red thfe .protectipn serv e r tS 
retrieve end user data.and personal profile data from the protection server according to 
policy setting and end user privacy level over an Application Programming: Interface and 
a third communication prptpool, 

24. (Previously Presented) the method; according to claim 23, further 
comprising the step of establishing an end user persphal profile data security 
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agreement beto/veen the intermediafy prp^iy server and the prbtection server (ph behalf 
of the end user and the service provider). 

:25. (Currently Amended) The method :aefe to claim 24, wherein the ind 
user personal profile data security agreement cpmprises a P3P agreement 

26.-28. (Canceled). 

29. (Currently Amended) The method according to claim 24 [[23]], wherein the 
end user preferences (privacy levels) are stored In the end user station or in the 
intermediary proxy server, and in that they can be separately stored after cpnfirmaitipn 
of the end user personal profile data security agreement. 

30. (Previously Presented) The method according to claim 23. further 
comprising the steps of: 

providing an API at the protection server, 

using the API for queries to the protection servers from the service 

provider, 

providing responses oyer a third cpmmunicatiph protocol to the service 

provider. 

31 (Previously Presented) The method of claim 30. further comprising the 
step Pf storing data in a number of tables in the protection server relating to user 
specific datia, end user pigrsonal profile data and statistical data. 

32. (Previously Presented) The method of claim 31, further comprising the 
step of pseudonymizirig statistical data and profile inforhiatibn such that end user 
personal datgi cannot be associate^i prtied to the actual end user; 
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33. (Currently Amended) The arrangement aGcording to claim 1 , wherein the 
intermediary wteffRe^iate proxy server is located within a Rersdnal environment , of the 
end user. 

34. (Currently Amended) The arrangement accordihg to claim -1, wherein the 
intermediary intermediate proxy server is located within premises of the end user. 

35. (Currently Amended) The arrangement according to claim 1 . wherein the 
intermediary iRtefme*^ proxy server is located within an intrao.et utilized by the end 
user. 
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